18:13 <apache2> a lazy trick for this kind of code is to steal an implementation that runs in a kernel somewhere (like linux or bsd kernel modules) since those are also libc-free

18:13 <apache2> usually they are easier to port imho

18:14 <apache2> argon2id is available in eg PHP because it's superior to scrypt

18:15 <apache2> scrypt is "broken" (the cpu/memory tradeoff thing is not as strong as originally thought, although still quite strong), and there are concerns over side channel stuff in scrypt, although I'm not sure of the specifics, so it would indeed be nice if we had argon2id somewhere in ocaml

18:18 <apache2> kakekongen: I've used scrypt-kdf with the xen target, that worked fine

18:19 <apache2> not sure why you would get the caml_salsa_core thing, it looks like it does have a mirage-freestanding target https://github.com/abeaumont/ocaml-salsa20-core/blob/master/pkg/META

21:56 <tg> any idea why a program might crash with sigill in libmpir when using nocrypto?

21:59 <tg> like this: https://github.com/mirleft/ocaml-nocrypto/issues/159

22:02 <copy`> tg: Apparently your installed libmpir uses some instructions that your processor doesn't support

22:03 <copy`> You could check what instructions is at address 0x00007ffff7f8c8b5

22:05 <tg> hm, right, it's vpbroadcastq

22:08 <apache2> you need to export a magic environment variable in your shell then reinstall nocrypto

22:09 <apache2> export NOCRYPTO_ACCELERATE="false"

22:09 <apache2> to have it operate correctly

22:10 <copy`> apache2: I believe that's for issues related to nocrypto's aes instructions, but in this case it's libmpir's fault (or nix's fault for installing the library on this particular machine)

22:10 <apache2> this is documented at the bottom of the readme

22:11 <apache2> ah I see

22:11 <apache2> why is it building with libmpir?

22:11 <apache2> sounds like the nix people packaged zarith incorrectly

22:13 <tg> i installed zarith via opam though

22:13 <apache2> or they chose to implement SSE2 feature detection by catching the sigill signal and something turned that off?

22:13 <apache2> right, but the question is why you have libmpir and not libgmp I guess

22:17 <apache2> also a little bit interesting what hw you're running this on that doesn't have SSE2 :)

22:19 <tg> i do have gmp and zarith finds at compile time (and it also requires mpir, just checked)

22:21 <tg> still the same with NOCRYPTO_ACCELERATE=false

22:21 <apache2> can you build libmpir without SSE2 acceleration?

22:22 <tg> it's a core i5 btw

22:22 <apache2> maybe writing Michael Raskin <7c6f434c@mail.ru>

22:22 <apache2> would give you some answers

22:23 <apache2> he's listed as the nixos maintainer of libmpir

22:23 <tg> i'll open a nix issue then..

22:25 <apache2> ah, looking at zarith that seems to be what pulls in mpir

22:26 <apache2> in `configure` it seems to look for GMP, if that fails it looks for MPIR, if that fails it errors out

22:28 <tg> ah wait it indeed didnt find the gmp lib for some reason

22:28 <apache2> ah

22:28 <tg> even though i had it in LIBRARY_PATH

22:28 <apache2> also there seems to be a ghetto thing involved here from the opam side called conf-gmp

22:29 <apache2> which had hardcoded cases for debian, ubuntu, homebrew, centos, fedora, openbsd, freebsd, alpine, opensuse, and defaults to not requiring anything if your os-distribution string doesn't match any of those

22:30 <apache2> so filing a patch with upstream at https://github.com/ocaml/opam-repository/issues to make sure it includes the gmp lib for nixos (or maybe just defaults to "gmp" for all undetected platforms?) might help

22:30 <apache2> LIBRARY_PATH? or LD_LIBRARY_PATH?

22:32 <apache2> afaict zarith will fail to detect gmp if it can't find gmp.h OR if itcan't link against a library called gmp, ie -lgmp

22:33 <tg> the former is what opam seems to use, but same thing if i set the latter as well

22:33 <tg> in the libdir there's a libgmp.so

22:35 <apache2> try export CPPFLAGS='-I/path/to/that/folder/'

22:35 <apache2> and export LDFLAGS="$CPPFLAGS"

22:35 <apache2> then reinstalling zarith

22:36 <apache2> ah no

22:36 <apache2> LDFLAGS='-L/path/to/that/folder/'

22:38 <apache2> LIBRARY_PATH sounds correct to me, I think the CPPFLAGS was the missing thing which causes it to not find gmp.h, which makes it try mpir. but i have no idea.

22:39 <apache2> mpir being broken on nix seems like a separate issue, if we can make zarith use libgmp we can hopefully avoid having to deal with that problem tonight :)

22:40 <apache2> tg: is your gmp.h in that folder?

22:41 <tg> well it finds gmp.h but not libgmp

22:41 <tg> also tried LDFLAGS

22:42 <tg> where is this gmp detection code?

22:42 <apache2> in `configure` in the zarith repo

22:42 <apache2> opam source zarith

22:42 <apache2> ccinc="$CPPFLAGS"

22:42 <apache2> cclib="$LDFLAGS"

22:43 <apache2> it defines checkinc() that looks for the .h file (ccinc aka CPPFLAGS) and checklib() that tries to link with a given library (cclib aka LDFLAGS)

22:44 <apache2> look for the comment that says: # check GMP, MPIR

22:44 <apache2> maybe try running that manually and see what happens

22:45 <apache2> I get:

22:45 <apache2> include gmp.h: found

22:45 <apache2> library gmp: found

22:45 <tg> i get found + not found

22:46 <tg> ah, now it worked

22:46 <apache2> what did you change?

22:49 <tg> actually it didn't i just misread the line and didnt notice the "not" :)

22:50 <apache2> cool so it didn't find the gmp library, but it found gmp.h ?

22:52 <apache2> env | fgrep LDFLAGS

22:52 <apache2> ?

23:07 <tg> argh, it was this sandbox path issue

23:07 <tg> OPAM_USER_PATH_RO did not contain all the required nix dirs

23:08 <tg> it's a nix bug, they use a wrapper to set this path but incorrectly apparently

23:10 <apache2> did you get it working?

23:10 <apache2> If you have energy for it, I think submitting a issue/patch to conf-gmp at the opam issues repo to make conf-gmp actually depend on gmp for nixos would be good

23:11 <apache2> it sounds like you happen to have gmp installed already?

23:11 <tg> yes it works now

23:12 <apache2> \o/

23:15 <tg> well, it seems there might be some other issue as well, because only one of the libdirs i tried was not in the sandbox, it should've found the other one..

23:17 <apache2> o, the joys of running research prototypes in production :)

23:23 <tg> anyway.

23:24 <tg> i'll report the path & mpir issue to nix then

23:26 <tg> as for conf-gmp, i wonder if there's any nix support for depexts?

23:28 <tg> found some lines mentioning "nixos"

23:28 <tg> in the opam repo, so seems there is

23:35 <apache2> cool :)

23:54 <tg> ok updated that issue with links to the other issues :)

23:55 <tg> apache2: thanks for the help